CVE-2023-46964

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46964
Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://foremost-smash-52a.notion.site/Hillstone-Next-Generation-FireWall-XSS-CVE-2023-46964-6cf1fe91e7ed4795adb1d89d75030d16
https://foremost-smash-52a.notion.site/Hillstone-Next-Generation-FireWall-XSS-CVE-2023-46964-6cf1fe91e7ed4795adb1d89d75030d16
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hillstonenet:sc-6000-e3960_firmware:5.5:*:*:*:*:*:*:*
cpe:2.3:h:hillstonenet:sc-6000-e3960:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2023-11-05 00:15

Updated : 2024-11-21 08:29

NVD link : CVE-2023-46964

Mitre link : CVE-2023-46964

CVE.ORG link : CVE-2023-46964

JSON object : View

Products Affected

hillstonenet

  • sc-6000-e3960_firmware
  • sc-6000-e3960
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')